CVE-2019-6714

CRITICAL

BlogEngine.NET < 3.3.6.0 - Unauthenticated Path Traversal and Local File Inclusion via PostList.ascx.cs

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-6714. PoCs published by Dustin Cobb.

AI-analyzed exploit summary This is a functional exploit for CVE-2019-6714, a directory traversal vulnerability in BlogEngine.NET <= 3.3.6. It leverages an unchecked 'theme' parameter to achieve remote code execution by uploading a malicious PostView.ascx file and triggering it via path traversal.

Description

An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx component from a potentially untrusted location on the local filesystem. This is especially dangerous if an authenticated user uploads a PostView.ascx file using the file manager utility, which is currently allowed. This results in remote code execution for an authenticated user.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dustin Cobb · webappsaspx
https://www.exploit-db.com/exploits/46353

This is a functional exploit for CVE-2019-6714, a directory traversal vulnerability in BlogEngine.NET <= 3.3.6. It leverages an unchecked 'theme' parameter to achieve remote code execution by uploading a malicious PostView.ascx file and triggering it via path traversal.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: BlogEngine.NET <= 3.3.6
Auth required
Prerequisites: Access to the admin panel to upload a malicious file · Network connectivity to a reverse shell listener
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/46353/
Product, Third Party Advisory x_refsource_misc
https://github.com/rxtur/BlogEngine.NET/
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2019/Jun/26
Product x_refsource_misc
https://blogengine.io/

Scores

CVSS v3 9.8
EPSS 0.3172
EPSS Percentile 98.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-22
Status published
Products (1)
blogengine/blogengine.net < 3.3.6.0
Published Mar 21, 2019
Tracked Since Feb 18, 2026